Bug#679826: zsnes: segfaults on start in testing i386

Fabian Greffrath fabian at greffrath.com
Mon Jul 2 09:35:54 UTC 2012


Am 02.07.2012 11:15, schrieb Fabian Greffrath:
> _open_device(). I haven't digged through libao sources that much, but
> I believe a more robust check in _sanitize_matrix() (which is where
> the crash actually occurs) may be appropriate.

The critical part is _sanitize_matrix() calling "char *ret = 
calloc(strlen(matrix)+1,1);" in src/audio_out.c line 633, whereas 
"matrix" can (and will) be garbage.

  - Fabian





More information about the Pkg-games-devel mailing list